← Feed

Posts

• View post

  eMudhra is an intermediary certificate authority. some of the most popular intermediary CAs* are Sectigo, GlobalSign, MilesWeb, and GeoTrust. would you \^_^/ like to tell me who the heck ✨ these✨ are? HTTPS has always had a failsafe called certificate revocation. it is working. at least, until the recent cultural shift of ethical hackers towards disclosing security vulnerabilities immediately for some reason barring said cultural shift, the situation would not have been much different if any...

• View post

  The Internet goes on high alert after discovery of 8 compromised TLS certs Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237. exploiting compromised certificates requires an active adversary-in-the-middle attack, meaning the attacker must act as a proxy between two TLS parties and receive encrypted traffic, decrypt it, reencrypt it, and send it to the other party. Such capabilities, in some cases, are usually limited to only the most well-resourced attackers. People wi...

• View post

  I Can't Decide ... by The Scissor Sisters

• View post

  his arms are too long

• View post

  the photorealistic AI image model that they use looks scarily realistic

• View post

  Have the comments here read the article? It’s arguing that the CEOs themselves have spread the doomer narrative and are now being molotov’d as a result. The subject of the title is/includes Altman, hence the Altman cover photo. This was way way better than I expected of Gizmodo (bravo Gizmodo), warning us that execs are only toning down their AI dooming for self-protection. Whatever happens, it feels like the AI executives have painted themselves into a corner. They’ve told everyone their pro...

• View post

  Around January 11, 2026, archive.today (aka archive.is, archive.md, etc) started using its users as proxies to conduct a distributed denial of service (DDOS) attack against Gyrovague, my personal blog. All users encountering archive.today’s CAPTCHA page currently load and execute the following Javascript: Posting this here since the dispute was started over a PII concern.